Privacy policy
This policy explains what personal data the Sheki Useini app (version 2 for iPhone and Android) and this website process, why we process it, and what your rights are.
1. Who is responsible
The controller is Klisard Muca. Email: [email protected]. The meditations are by Sheki Useini.
2. What data we use
- Account: your email address, your name (if you give it) and your password, stored only as a secure hash. If you sign in with Google or Apple, we receive your identifier and email from them; with Apple you can hide your email, and we then receive a relay address.
- Profile: your profile photo (if you choose one), the app language and appearance.
- Your practice: the goals and practice time you choose at the start, what you listen to and for how long, where you left off, favorites, saved messages and how you feel after a session. From these we calculate your streak and minutes.
- Reviews: the stars and notes you give sessions and retreats, and our replies.
- Notifications: a device token for notifications, your time zone, language and app version, your reminder and notification settings, and whether you opened a notification we sent (to count how many people open them).
- Subscription: whether you have Premium, the product, the store, the renewal or expiry dates and the subscription's events (started, renewed, cancelled, refunded), and any Premium our team gives you. Payments are made through Apple or Google; we never see your card details.
- Team notes: our team may keep a short internal note on your account to help you (for example about a request). You don't see it, and it is deleted with your account.
- Crash reports: when the app crashes, the device model, operating system, app version and technical details of the error.
- Technical data: our providers' servers log technical data such as your IP address when you use the app or this site, for security, and keep it for a short time.
- Messages you send us, for example by email.
We don't collect your location, contacts or photos (except the photo you choose for your profile). We show no ads and we don't sell or share data for advertising. Downloaded meditations are stored only on your device.
3. Why we use it
- To provide the app, your account, the content and your subscription (our contract with you).
- To send the reminders and notifications you turned on (your consent; you can turn them off in the app or in your device settings).
- To send news and announcements from Sheki (you can turn them off in the app: You → Reminders → News and announcements).
- To answer your reviews and requests, keep the service secure, fix errors and understand usage in general (legitimate interest).
- When the law requires it.
4. Who processes it for us
We use trusted providers that process data only on our instructions:
- Supabase: database, sign-in, file storage and server functions. Data is stored in: the European Union (Ireland).
- Cloudflare: audio file storage and this website.
- RevenueCat: subscription status.
- Apple and Google: the app stores, payments, signing in with Apple or Google, and delivering notifications (Apple Push Notification service and Firebase Cloud Messaging).
- Google Firebase Crashlytics: crash reports.
- Resend: sending emails, for example password codes.
Some of them are in the USA. Transfers are protected by the EU Standard Contractual Clauses or the EU–US / Swiss–US Data Privacy Framework, as applicable.
Within our small team (owners, editors and support), your account, subscription, practice and reviews are seen only by the people who run the service and handle your requests, after signing in with two-step verification. Only owners can export lists, and the team's actions are logged.
5. How long we keep it
For as long as you have an account. When you delete your account, we delete your account, profile, practice data, reviews, team notes, devices, profile photos and your subscription record at RevenueCat. Listening statistics with no link to you may remain. The record of our team's actions (for example that a reply was sent or Premium given) keeps your name for up to 2 years, for security. Backup copies are overwritten within 7 days. Crash reports are kept for up to 90 days. Apple and Google keep purchase records under their own policies.
6. Your rights
You have the right to ask for access to your data, to correct or delete it, to get a copy to take with you, to restrict or object to processing, and to withdraw your consent. Write to us at [email protected]. You can delete your account yourself in the app (You → Account settings → Delete account) or on the Delete account page.
You also have the right to complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in Albania the Commissioner for the Right to Information and Personal Data Protection (IDP), in Kosovo the Information and Privacy Agency, and in the EU the authority of your country.
7. Children
The app is not meant for children under 13, and we don't knowingly collect their data. If you are under the age of digital consent in your country, use it only with a parent's permission. If you think a child has given us data, write to us and we will delete it.
8. Security
Connections are encrypted (TLS), team access requires two-step verification, and audio is only served through links that expire quickly.
9. Changes
When we change this policy, we update this page and the date at the top. We tell you in the app about important changes.
10. Contact
Privacy questions: [email protected].